$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json) Hash identifier: HhqbiIRTLnt8zDV/m9g2XTLq5xZQ92C6IAGtIC/LA3Y= Subject key identifier: 57:38:6E:20:A5:3E:B4:CE:6F:14:CD:85:06:9B:CB:8A:07:61:EC:C7 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 33ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft Manifest number: 33DF Signing time: Sat 04 May 2024 14:24:41 +0000 Manifest this update: Sat 04 May 2024 14:24:40 +0000 Manifest next update: Sat 11 May 2024 14:24:40 +0000 Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: BAvB/VGKl+JNkuhGwdbLr4cO/JijORDHv+NWRZ6hXUY=) 2: 875E3760EBF611EE95A7EF65C4F9AE02.roa (hash: zW0+8s5gxQEUIfZoWyTaKNsEMpC+hI/BmeIDsvKseiw=) 3: AEDAFB9EFF6011ED90C62C26C4F9AE02.roa (hash: Mkpmb2RqzwwDcmeG3I2WdmKkq9yxX4qMJoYA7jidUZE=) 4: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: BqDpK6DjE434vivt3a84iuEfOmpPaVUtSqtPi7pKaFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13293 (0x33ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: May 4 14:24:40 2024 GMT Not After : May 11 14:24:40 2024 GMT Subject: CN=66364529-d28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:7f:13:f9:17:39:4e:62:19:d8:3f:a9:df: a6:98:c1:60:79:ac:c7:cf:ec:8b:9f:90:48:9c:5b: 32:f0:c0:82:0f:25:1a:a8:df:6c:23:f1:a6:5c:9b: 3c:4b:0b:77:6f:47:cc:4b:4b:5f:38:ae:03:cb:d0: 76:56:0b:d0:56:e8:0e:cc:de:4d:49:12:29:a1:1b: 50:2c:60:b2:8e:6e:9b:8b:0b:58:6c:86:2f:b6:3c: 9b:61:16:e0:02:7f:4b:a2:62:e2:5e:fa:87:e5:4c: 70:c5:af:47:d2:80:fb:06:64:0a:eb:f8:3c:66:9c: 88:84:dc:8e:40:20:79:2a:12:26:19:5a:76:13:88: 9d:6b:9a:2a:31:ad:e3:9d:ef:7d:76:1d:1b:85:3c: 57:14:7b:58:46:10:dc:09:f5:b7:dc:ef:9c:0a:07: 5f:bd:69:eb:3b:73:46:37:c0:8e:83:cf:c1:f6:a9: f2:00:c3:ac:2e:7a:69:dc:53:ec:0a:74:bd:ba:ea: 93:fd:84:2f:38:6d:ec:dd:e8:c6:30:98:52:ae:06: 21:dc:7a:08:0c:16:d8:8e:9f:bf:a6:71:b1:95:90: 0f:d0:55:57:a1:a3:39:6e:f2:b6:78:90:10:ff:43: e8:aa:d7:81:5e:f0:4e:95:33:e7:b1:b5:99:a9:93: 4b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:38:6E:20:A5:3E:B4:CE:6F:14:CD:85:06:9B:CB:8A:07:61:EC:C7 X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e3:3d:05:2c:d0:b7:99:d1:e2:3d:0c:18:21:52:d6:e3:ca: 77:3c:11:79:8e:9f:14:9b:f9:40:ca:bf:04:a1:a1:a9:2e:21: 60:f3:8c:f1:44:4d:e0:18:0a:d9:04:50:fd:9e:7e:3d:94:d8: 52:d7:e2:b5:be:6b:10:59:8d:4d:7f:34:8f:38:9a:63:bb:83: 09:21:54:20:aa:67:75:d1:57:38:bb:7d:f2:c0:23:50:2a:54: 58:47:9f:df:c9:6b:a5:b4:31:95:c7:cd:12:ab:97:4b:a4:0c: 01:f3:9b:30:49:76:54:42:59:de:49:27:8e:2d:05:77:9a:ca: 33:68:c3:7d:1a:b6:20:81:54:d3:9f:5c:0d:83:9e:d2:a9:62: 7a:de:e4:2d:46:58:88:76:4e:36:3b:f7:9d:e4:5b:45:62:d7: a4:16:ae:75:96:7c:ae:a1:4a:e9:e4:a1:26:84:61:5b:f6:9e: 0f:ab:3e:7d:c6:3a:20:09:48:4a:ad:f4:8f:7a:ad:68:5f:f7: d6:08:81:02:44:35:0e:b7:7d:63:05:20:53:49:1d:48:bf:91: 99:ec:c3:0a:ce:41:72:75:39:88:80:ab:51:96:49:77:4c:26: 13:46:77:2c:f2:bb:92:6c:4a:76:ab:33:60:57:f9:6f:f5:5b: 90:51:39:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjQwNTA0MTQyNDQwWhcNMjQwNTExMTQyNDQwWjAYMRYwFAYD VQQDEw02NjM2NDUyOS1kMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAR/E/kXOU5iGdg/qd+mmMFgeazHz+yLn5BInFsy8MCCDyUaqN9sI/GmXJs8 Swt3b0fMS0tfOK4Dy9B2VgvQVugOzN5NSRIpoRtQLGCyjm6biwtYbIYvtjybYRbg An9LomLiXvqH5Uxwxa9H0oD7BmQK6/g8ZpyIhNyOQCB5KhImGVp2E4ida5oqMa3j ne99dh0bhTxXFHtYRhDcCfW33O+cCgdfvWnrO3NGN8COg8/B9qnyAMOsLnpp3FPs CnS9uuqT/YQvOG3s3ejGMJhSrgYh3HoIDBbYjp+/pnGxlZAP0FVXoaM5bvK2eJAQ /0PoqteBXvBOlTPnsbWZqZNLWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc4biCl PrTObxTNhQaby4oHYezHMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR4z0FLNC3mdHiPQwYIVLW48p3PBF5jp8Um/lAyr8EoaGpLiFg84zx RE3gGArZBFD9nn49lNhS1+K1vmsQWY1NfzSPOJpju4MJIVQgqmd10Vc4u33ywCNQ KlRYR5/fyWultDGVx80Sq5dLpAwB85swSXZUQlneSSeOLQV3msozaMN9GrYggVTT n1wNg57SqWJ63uQtRliIdk42O/ed5FtFYtekFq51lnyuoUrp5KEmhGFb9p4Pqz59 xjogCUhKrfSPeq1oX/fWCIECRDUOt31jBSBTSR1Iv5GZ7MMKzkFydTmIgKtRlkl3 TCYTRncs8ruSbEp2qzNgV/lv9VuQUTnN -----END CERTIFICATE-----Generated at Sat May 4 15:54:59 2024 by rpki-client on console-ams.rpki-client.org